5.5 Medium

CVE-2026-84610 A file quarantine bypass was addressed with additional checks

Description

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: Low
Privileges required: None
Interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None

Affected products and versions

Product	Affected versions	Fixed in
macOS 27	earliest → < 27	27
macOS 26.7	earliest → < 26.7.2	26.7.2
macOS 15.8	earliest → < 15.8.2	15.8.2

References

support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com

Timeline

Published October 26, 2026
Last modified November 4, 2026

The 3813 CVEs of macOS →

CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Medium CVE-2026-65327 A logic issue was addressed with improved checks 8.4 High

Track this CVE